flat-logger-core@1.0.0

Analysis

flat-logger-core@1.0.0 is a thin wrapper package (index.js re-exports simple-logger-kit) that pins its sole dependency to a non-registry URL (hxxps://artifacts[.]stg[.]yosiroute[.]com/npm/simple-logger-kit). Installing this package causes npm to fetch and execute arbitrary code from that URL at install time. The package has no repository, no description beyond "Generated package", and its only purpose is to redirect dependency resolution to an attacker-controlled endpoint.